SNMP Trap for Port or Link status
Resolution
Details
Link and/or port monitoring via SNMP is done through the system (sys) logs in the Palo Alto Networks firewall. A SNMP trap can be sent for all of the sys logs. Since there are sys logs which provide the status of ports/links, SNMP traps can be sent for the status of a port or link. The caveat to this is that the sys logs are sent to a SNMP trap destination according to severity level and not by
individual sys log type. For example, all "low" level logs will go to the same destination, regardless of the type of alert being recorded. You will not be able to pick out individual logs and send them to a SNMP server separately.
In order to have a SNMPtrap sent for the status of a port or link, first define a SNMP trap destination as in the screenshot below:
From the WebGUI, go to > Devic e tab > Server Profiles > SNMP Traps > click on new and fill in the appropriate information.
Next define the system log setting.
Go to Device tab > Log Settings >System >click on Edit
Select the SNMP trap destination for each severity of the system log to match the server profile just created.
Commit
Now that you are sending a SNMP trap specifically for the status of a link or port you will need to know what those system logs specifically are.
...this log gives the status and severity of a port status
...this log is actually the same as the port status log above. It is just a sample of what will show up in the system log.
Commit
...if you are configured in HA and are doing link monitoring, the logs/log severities below will need to be sent as trap to snmp server:
To get SNMP traps sent for port status, you will need to send "informational" level system logs as snmp traps. If you are configured for HA and are doing link monitoring you can send "high"and "critical" level system logs.